Cisco Cisco Email Security Appliance C160 Mode D'Emploi
9-25
User Guide for AsyncOS 9.8 for Cisco Email Security Appliances
Chapter 9 Using Message Filters to Enforce Email Policies
Message Filter Rules
Envelope Recipient Rule
The
rcpt-to
rule selects those messages where any Envelope Recipient matches the given regular
expression. For example, the following filter drops all messages sent with an email address containing
the string “scarface.”
the string “scarface.”
Note
The regular expression for the
rcpt-to
rule is case insensitive.
Note
The
rcpt-to
rule is message-based. If a message has multiple recipients, only one recipient has to match
the rule for the specified action to affect the message to all recipients.
Envelope Recipient in Group Rule
The
rcpt-to-group
rule selects those messages where any Envelope Recipient is found to be a member
of the LDAP group given. For example, the following filter drops all messages sent with an email address
within the LDAP group “ExpiredAccounts.”
within the LDAP group “ExpiredAccounts.”
Note
The
rcpt-to-group
rule is message-based. If a message has multiple recipients, only one recipient has
to match the rule for the specified action to affect the message to all recipients.
Envelope Sender Rule
The
mail-from
rule selects those messages where the Envelope Sender matches the given regular
expression. For example, the following filter immediately delivers any message sent by
admin@yourdomain.com
.
scarfaceFilter:
if (rcpt-to == 'scarface')
{
drop();
}
expiredFilter:
if (rcpt-to-group == 'ExpiredAccounts')
{
drop();
}